Privilege escalation in Intel Nuc7i3bnh
CVE-2017-5722
Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows attackers with local or physical access to bypass enforcement of integrity protections via manipulation of firmware storage.
Vulnerability class: Privilege Escalation
EPSS: 0.003 (27.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Intel Nuc7i3bnh
- Intel Nuc7i3bnh_firmware — versions ayaplcel.86a.0041, bnkbl357.86a.0052, ccsklm5v.86a.0052
- Intel Nuc7i3bnk
- Intel Nuc7i3bnk_firmware — versions ayaplcel.86a.0041, bnkbl357.86a.0052, ccsklm5v.86a.0052
- Intel Nuc7i5bnh
- Intel Nuc7i5bnh_firmware — versions ayaplcel.86a.0041, bnkbl357.86a.0052, ccsklm5v.86a.0052
- Intel Nuc7i5bnk
- Intel Nuc7i5bnk_firmware — versions ayaplcel.86a.0041, bnkbl357.86a.0052, ccsklm5v.86a.0052
- Intel Nuc7i7bnh
- Intel Nuc7i7bnh_firmware — versions ayaplcel.86a.0041, bnkbl357.86a.0052, ccsklm5v.86a.0052
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secure@intel.com (x_refsource_CONFIRM, Patch, Third Party Advisory)
- secure@intel.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2017-5722?
- CVE-2017-5722 is a high-severity vulnerability in Intel Nuc7i3bnh, classified under Improper Privilege Management. CVSS score: 7.5/10. Published 2017-10-11.
- How severe is CVE-2017-5722?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2017-5722 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.